您现在的位置：首页 ＞ 病毒救援 ＞ 不能安全模式启动,杀毒软件不能启动, > 正文

不能安全模式启动,杀毒软件不能启动,

2010/02/03 19:28 作者:chenwei_jia 点击:1118 评论：5 条


代码

2010-02-03,18:07:17
System Repair Engineer 2.8.2.1321
Smallfrogs (http://www.KZTechs.com)
Windows XP Professional Service Pack 3 (Build 2600) - 管理权限用户 - 完整功能
以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联
Winsock 提供者
Autorun.inf
HOSTS 文件
进程特权扫描
计划任务
API HOOK
隐藏进程

启动项目
注册表
[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
<ctfmon.exe><C:windowssystem32ctfmon.exe> [(Verified)Microsoft Windows Component Publisher]
<360sd><"E:360360sd360sdrun.exe"> [(Verified)Qizhi Software (beijing) Co. Ltd]
<FlashGet 3><"C:Program FilesFlashGet NetworkFlashGet 3FlashGet3.exe" -minimize> [File is missing]
<FlashGetBHO><"C:Program FilesFlashGet NetworkFlashGet 3mxhelper.exe"> [File is missing]
<OM2_Monitor><"C:Program FilesOLYMPUSOLYMPUS Master 2MMonitor.exe" -NoStart> [(Verified)OLYMPUS IMAGING CORP.]
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
<RTHDCPL><RTHDCPL.EXE> [(Verified)Microsoft Windows Hardware Compatibility Publisher]
<nwiz><nwiz.exe /installquiet> [(Verified)NVIDIA Corporation]
<NvMediaCenter><RUNDLL32.EXE C:WINDOWSsystem32NvMcTray.dll,NvTaskbarInit> [NVIDIA Corporation]
<NvCplDaemon><RUNDLL32.EXE C:WINDOWSsystem32NvCpl.dll,NvStartup> [NVIDIA Corporation]
<360Safetray><"E:360safemon360tray.exe" /start> [(Verified)Qizhi Software (beijing) Co. Ltd]
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindows NTCurrentVersionWinlogon]
<shell><Explorer.exe> [(Verified)Microsoft Windows Component Publisher]
<Userinit><C:WINDOWSsystem32userinit.exe,> [Microsoft Corporation]
<UIHost><logonui.exe> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooks]
<{AEB6717E-7E19-11d0-97EE-00C04FD91972}><shell32.dll> [(Verified)Microsoft Windows Component Publisher]
<{AC3E068F-A80D-43FB-B09B-081B73CCFAC9}><C:Documents and SettingsNetworkServiceApplication DataDbg32.Sys> []
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad]
<PostBootReminder><%SystemRoot%system32SHELL32.dll> [(Verified)Microsoft Windows Component Publisher]
<CDBurn><%SystemRoot%system32SHELL32.dll> [(Verified)Microsoft Windows Component Publisher]
<WebCheck><%SystemRoot%system32webcheck.dll> [(Verified)Microsoft Windows Component Publisher]
<SysTray><C:WINDOWSsystem32stobject.dll> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifycrypt32chain]
<WinlogonNotify: crypt32chain><crypt32.dll> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifycryptnet]
<WinlogonNotify: cryptnet><cryptnet.dll> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifycscdll]
<WinlogonNotify: cscdll><cscdll.dll> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifydimsntfy]
<WinlogonNotify: dimsntfy><%SystemRoot%System32dimsntfy.dll> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyScCertProp]
<WinlogonNotify: ScCertProp><wlnotify.dll> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifySchedule]
<WinlogonNotify: Schedule><wlnotify.dll> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifysclgntfy]
<WinlogonNotify: sclgntfy><sclgntfy.dll> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifySensLogn]
<WinlogonNotify: SensLogn><WlNotify.dll> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifytermsrv]
<WinlogonNotify: termsrv><wlnotify.dll> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifywlballoon]
<WinlogonNotify: wlballoon><wlnotify.dll> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerSharedTaskScheduler]
<{438755C2-A8BA-11D1-B96B-00A0C90312E1}><%SystemRoot%system32browseui.dll> [(Verified)Microsoft Windows Component Publisher]
<{8C7461EF-2B13-11d2-BE35-3078302C2030}><%SystemRoot%system32browseui.dll> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftActive SetupInstalled Components<{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}]
<IE7 Uninstall Stub><C:WINDOWSsystem32ieudinit.exe> [Microsoft Corporation]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftActive SetupInstalled Components>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
<Microsoft Windows Media Player><C:WINDOWSinfunregmp2.exe /ShowWMP> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftActive SetupInstalled Components>{26923b43-4d38-484f-9b9e-de460746276c}]
<Internet Explorer><%systemroot%system32shmgrate.exe OCInstallUserConfigIE> [File is missing]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftActive SetupInstalled Components>{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS]
<浏览器自定义组件><RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftActive SetupInstalled Components>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
<Outlook Express><%systemroot%system32shmgrate.exe OCInstallUserConfigOE> [File is missing]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftActive SetupInstalled Components{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
<Themes Setup><%SystemRoot%system32regsvr32.exe /s /n /i:/UserInstall %SystemRoot%system32themeui.dll> [File is missing]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftActive SetupInstalled Components{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
<Microsoft Outlook Express 6><"%ProgramFiles%Outlook Expresssetup50.exe" /APP:OE /CALLER:WINNT /user /install> [File is missing]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftActive SetupInstalled Components{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
<Microsoft Windows Media Player><rundll32.exe advpack.dll,LaunchINFSection C:WINDOWSINFwmp.inf,PerUserStub> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftActive SetupInstalled Components{7790769C-0471-11d2-AF11-00C04FA35D02}]
<通讯簿 6><"%ProgramFiles%Outlook Expresssetup50.exe" /APP:WAB /CALLER:WINNT /user /install> [File is missing]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftActive SetupInstalled Components{89820200-ECBD-11cf-8B85-00AA005B4340}]
<Windows 桌面更新><regsvr32.exe /s /n /i:U shell32.dll> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftActive SetupInstalled Components{89820200-ECBD-11cf-8B85-00AA005B4383}]
<Internet Explorer 6><%SystemRoot%system32ie4uinit.exe> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftActive SetupInstalled Components{89B4C1CD-B018-4511-B0A1-5476DBF70820}]
<N/A><C:WINDOWSsystem32Rundll32.exe C:WINDOWSsystem32mscories.dll,Install> [Microsoft Corporation]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Options360hotfix.exe]
<IFEO[360hotfix.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Options360rp.exe]
<IFEO[360rp.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Options360rpt.exe]
<IFEO[360rpt.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Options360safe.exe]
<IFEO[360safe.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Options360safebox.exe]
<IFEO[360safebox.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Options360sd.exe]
<IFEO[360sd.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Options360se.exe]
<IFEO[360se.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Options360SoftMgrSvc.exe]
<IFEO[360SoftMgrSvc.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Options360speedld.exe]
<IFEO[360speedld.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Options360tray.exe]
<IFEO[360tray.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsast.exe]
<IFEO[ast.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsavcenter.exe]
<IFEO[avcenter.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsavgnt.exe]
<IFEO[avgnt.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsavguard.exe]
<IFEO[avguard.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsavmailc.exe]
<IFEO[avmailc.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsavp.exe]
<IFEO[avp.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsavwebgrd.exe]
<IFEO[avwebgrd.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsbdagent.exe]
<IFEO[bdagent.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsCCenter.exe]
<IFEO[CCenter.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsccSvcHst.exe]
<IFEO[ccSvcHst.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsegui.exe]
<IFEO[egui.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsekrn.exe]
<IFEO[ekrn.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionskavstart.exe]
<IFEO[kavstart.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionskissvc.exe]
<IFEO[kissvc.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionskmailmon.exe]
<IFEO[kmailmon.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionskpfw32.exe]
<IFEO[kpfw32.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionskpfwsvc.exe]
<IFEO[kpfwsvc.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionskrnl360svc.exe]
<IFEO[krnl360svc.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionskswebshield.exe]
<IFEO[kswebshield.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsKVMonXP.kxp]
<IFEO[KVMonXP.kxp]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsKVSrvXP.exe]
<IFEO[KVSrvXP.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionskwatch.exe]
<IFEO[kwatch.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionslivesrv.exe]
<IFEO[livesrv.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsMcagent.exe]
<IFEO[Mcagent.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsmcmscsvc.exe]
<IFEO[mcmscsvc.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsMcNASvc.exe]
<IFEO[McNASvc.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsMcods.exe]
<IFEO[Mcods.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsMcProxy.exe]
<IFEO[McProxy.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsMcSACore.exe]
<IFEO[McSACore.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsMcshield.exe]
<IFEO[Mcshield.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsmcsysmon.exe]
<IFEO[mcsysmon.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsmcvsshld.exe]
<IFEO[mcvsshld.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsMpfSrv.exe]
<IFEO[MpfSrv.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsMPMon.exe]
<IFEO[MPMon.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsMPSVC.exe]
<IFEO[MPSVC.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsMPSVC1.exe]
<IFEO[MPSVC1.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsMPSVC2.exe]
<IFEO[MPSVC2.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsmsksrver.exe]
<IFEO[msksrver.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsqutmserv.exe]
<IFEO[qutmserv.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsRavMonD.exe]
<IFEO[RavMonD.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsRavTask.exe]
<IFEO[RavTask.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsRsAgent.exe]
<IFEO[RsAgent.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsrsnetsvr.exe]
<IFEO[rsnetsvr.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsRsTray.exe]
<IFEO[RsTray.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionssafeboxTray.exe]
<IFEO[safeboxTray.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsScanFrm.exe]
<IFEO[ScanFrm.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionssched.exe]
<IFEO[sched.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsseccenter.exe]
<IFEO[seccenter.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsSfCtlCom.exe]
<IFEO[SfCtlCom.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsTMBMSRV.exe]
<IFEO[TMBMSRV.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsTmProxy.exe]
<IFEO[TmProxy.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsUfSeAgnt.exe]
<IFEO[UfSeAgnt.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsvsserv.exe]
<IFEO[vsserv.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionszhudongfangyu.exe]
<IFEO[zhudongfangyu.exe]><ntsd -d> [N/A]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Options修复工具.exe]
<IFEO[修复工具.exe]><ntsd -d> [N/A]
[HKEY_CURRENT_USERControl PanelDesktop]
<SCRNSAVE.EXE><C:windowssystem32scrnsave.scr> [(Verified)Microsoft Windows Component Publisher]
==================================
启动文件夹
[Acrobat Assistant]
<C:Documents and SettingsAll Users「开始」菜单程序启动Acrobat Assistant.lnk --> C:PROGRA~1AdobeACROBA~1.0Distillracrotray.exe [Adobe Systems Inc.]><N>
[QQ游戏启动加速程序]
<C:Documents and SettingsAdministrator「开始」菜单程序启动QQ游戏启动加速程序.lnk --> E:PROGRA~1腾讯游戏QQGAMEAccel.exe [深圳市腾讯计算机系统有限公司]><N>
==================================
服务
[360 杀毒实时防护服务 / 360rp][Stopped/Auto Start]
<"E:360360sd360rp.exe"><360.cn>
[Application Management / AppMgmt][Stopped/Auto Start]
<C:windowssystem32svchost.exe -k netsvcs-->%SystemRoot%System32appmgmts.dll><N/A>
[ASP.NET State Service / aspnet_state][Stopped/Manual Start]
<C:windowsMicrosoft.NETFrameworkv1.1.4322aspnet_state.exe><Microsoft Corporation>
[Autodesk Licensing Service / Autodesk Licensing Service][Stopped/Manual Start]
<"C:Program FilesCommon FilesAutodesk SharedServiceAdskScSrv.exe"><Autodesk, Inc.>
[Background Intelligent Transfer Service / BITS][Stopped/]
<2 - 系统找不到指定的文件。
><(File is missing)>
[DCOM Server Process Launcher / DcomLaunch][Running/Auto Start]
<C:windowssystem32svchost -k DcomLaunch-->%SystemRoot%system32rpcss.dll>< >
[Human Interface Device Access / HidServ][Stopped/Disabled]
<C:windowsSystem32svchost.exe -k netsvcs-->%SystemRoot%System32hidserv.dll><N/A>
[NVIDIA Display Driver Service / nvsvc][Running/Auto Start]
<C:WINDOWSsystem32nvsvc32.exe><NVIDIA Corporation>
[Remote Procedure Call (RPC) / RpcSs][Running/Auto Start]
<C:windowssystem32svchost -k rpcss-->%SystemRoot%system32rpcss.dll>< >
[BitDefender Threat Scanner / scan][Stopped/Manual Start]
<C:windowsSystem32svchost.exe -k bdx-->E:360360sdScan.dll><S.C. BitDefender S.R.L>
[SRS PostInstaller Service / SRS_PostInstaller][Running/Auto Start]
<"C:Program FilesSRS LabsWOWXT and TSXT DriverSRS_PostInstaller2.exe"><SRS Labs, Inc.>
[主动防御 / ZhuDongFangYu][Stopped/Auto Start]
<"E:360deepscanzhudongfangyu.exe"><360.cn>
==================================
驱动程序
[360SelfProtection / 360SelfProtection][Running/System Start]
<system32drivers360SelfProtection.sys><360安全中心>
[Ambfilt / Ambfilt][Stopped/Manual Start]
<system32driversAmbfilt.sys><Creative>
[Atheros AR5008 Wireless Network Adapter Service / AR5416][Running/Manual Start]
<system32DRIVERSathw.sys><Atheros Communications, Inc.>
[bdfsfltr / bdfsfltr][Running/System Start]
<system32DRIVERSbdfsfltr.sys><BitDefender S.R.L. Bucharest, ROMANIA>
[BFSDRV / BFSDRV][Running/System Start]
<??C:WINDOWSsystem32driversbfsdrv.sys><360安全中心>
[BREGDRV / BREGDRV][Running/System Start]
<??C:WINDOWSsystem32driversbregdrv.sys><360安全中心>
[EfiSystemMon / EfiMon][Running/System Start]
<System32DriversEfimon.sys><奇虎网>
[Microsoft 用于 High Definition Audio 的 UAA 总线驱动程序 / HDAudBus][Running/Manual Start]
<system32DRIVERSHDAudBus.sys><Windows (R) Server 2003 DDK provider>
[HookPort / HookPort][Running/Boot Start]
<SystemRootSystem32DriversHookport.sys><360安全中心>
[Service for Realtek HD Audio (WDM) / IntcAzAudAddService][Running/Manual Start]
<system32driversRtkHDAud.sys><Realtek Semiconductor Corp.>
[Monfilt / Monfilt][Stopped/Manual Start]
<system32driversMonfilt.sys><Creative Technology Ltd.>
[nv / nv][Running/Manual Start]
<system32DRIVERSnv4_mini.sys><NVIDIA Corporation>
[Service for NVIDIA High Definition Audio Driver / NVHDA][Running/Manual Start]
<system32driversnvhda32.sys><NVIDIA Corporation>
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
<system32DRIVERSptilink.sys><Parallel Technologies, Inc.>
[PxHelp20 / PxHelp20][Running/Boot Start]
<SystemRootSystem32DriversPxHelp20.sys><Sonic Solutions>
[Quantum DeepScanner Servers / qutmdserv][Stopped/Manual Start]
<??C:WINDOWSsystem32driversqutmdrv.sys><360.cn>
[qutmipc / qutmipc][Running/System Start]
<??C:WINDOWSsystem32driversqutmipc.sys><360安全中心>
[Secdrv / Secdrv][Stopped/Manual Start]
<system32DRIVERSsecdrv.sys><Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.>
[TCP/IP Protocol Driver / Tcpip][Running/System Start]
<system32DRIVERStcpip.sys><Microsoft Corporation>
[WOW XT Filter Driver / wowfilter][Running/Manual Start]
<system32driverswowfilter.sys><>
[NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller / yukonwxp][Running/Manual Start]
<system32DRIVERSyk51x86.sys><Marvell>
[wowsub / wowsub][Running/]
<2 - 系统找不到指定的文件。
><N/A>
[Nernet / Nernet][Running/]
<2 - 系统找不到指定的文件。
><N/A>
[Kisstusb / Kisstusb][Running/]
<2 - 系统找不到指定的文件。
><N/A>
==================================
浏览器加载项
[]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <, >
[Tencent Browser Helper]
{0C7C23EF-A848-485B-873C-0ED954731014} <C:Program FilesTENCENTSSPlusSAddr1.dll, (Signed) 腾讯>
[QvodExtend]
{53AC8551-0DE0-4606-8A1E-A51AF20ADD60} <E:快播QvodPlayerQvodExtend.dll, (Signed) Shenzhen QVOD Technology Co.,Ltd>
[AcroIEToolbarHelper Class]
{AE7CD045-E861-484f-8273-0445EE161910} <C:Program FilesAdobeAcrobat 6.0AcrobatAcroIEFavClient.dll, N/A>
[SafeMon Class]
{B69F34DD-F0F9-42DC-9EDD-957187DA688D} <E:360safemonsafemon.dll, (Signed) 360安全中心>
[]
{09BA8F6D-CB54-424B-839C-C2A6C8E6B436} <, >
[]
{e2e2dd38-d088-4134-82b7-f2ba38496583} <%windir%Network Diagnosticxpnetdiag.exe, (Signed) N/A>
[Adobe PDF]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} <C:Program FilesAdobeAcrobat 6.0AcrobatAcroIEFavClient.dll, N/A>
[AxInputControl Class]
{73E4740C-08EB-4133-896B-8D0A7C9EE3CD} <C:WINDOWSDOWNLO~1INPUTC~1.DLL, N/A>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:windowssystem32MacromedFlashFlash10d.ocx, (Signed) Adobe Systems, Inc.>
[ThunderAtOnce Class]
{01443AEC-0FD1-40FD-9C87-E93D1494C233} <C:Program FilesThunder NetworkThunderComDllsTDAtOnce_Now.dll, N/A>
[]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <, >
[Tencent Browser Helper]
{0C7C23EF-A848-485B-873C-0ED954731014} <C:Program FilesTENCENTSSPlusSAddr1.dll, (Signed) 腾讯>
[]
{18DF081C-E8AD-4283-A596-FA578C2EBDC3} <, >
[DHTML Edit Control Safe for Scripting for IE5]
{2D360201-FFF5-11D1-8D03-00A0C959BC0A} <C:Program FilesCommon FilesMicrosoft SharedTrieditdhtmled.ocx, (Signed) Microsoft Corporation>
[]
{31C1E375-AA72-4D87-AF9A-32746107B662} <, >
[Adobe PDF]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} <C:Program FilesAdobeAcrobat 6.0AcrobatAcroIEFavClient.dll, N/A>
[XML Document]
{48123BC4-99D9-11D1-A6B3-00C04FD91555} <C:windowssystem32msxml3.dll, (Signed) Microsoft Corporation>
[QQPYChecker Class]
{5052B4D0-9DF7-45ef-88EF-F42C0EA33A43} <C:Program FilesTencentQQPinyin3.1.722.201QQImeChecker.dll, (Signed) Tencent>
[QvodExtend]
{53AC8551-0DE0-4606-8A1E-A51AF20ADD60} <E:快播QvodPlayerQvodExtend.dll, (Signed) Shenzhen QVOD Technology Co.,Ltd>
[Shell Name Space]
{55136805-B2DE-11D1-B9F2-00A0C98BC547} <%SystemRoot%system32shdocvw.dll, (Signed) N/A>
[Windows Media Player]
{6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:WINDOWSsystem32wmp.dll, (Signed) Microsoft Corporation>
[Active Desktop Mover]
{72267F6A-A6F9-11D0-BC94-00C04FB67863} <%SystemRoot%system32SHELL32.dll, (Signed) N/A>
[360SafeLive]
{87515F61-A66C-4319-A0E0-D416CB8059E3} <E:360Safelive.dll, (Signed) >
[Microsoft Web 浏览器]
{8856F961-340A-11D0-A96B-00C04FD705A2} <C:WINDOWSsystem32shdocvw.dll, (Signed) Microsoft Corporation>
[Microsoft Scriptlet Component]
{AE24FDAE-03C6-11D1-8B76-0080C744F389} <C:WINDOWSsystem32mshtml.dll, (Signed) Microsoft Corporation>
[AcroIEToolbarHelper Class]
{AE7CD045-E861-484F-8273-0445EE161910} <C:Program FilesAdobeAcrobat 6.0AcrobatAcroIEFavClient.dll, N/A>
[SearchAssistantOC]
{B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%system32shdocvw.dll, (Signed) N/A>
[SafeMon Class]
{B69F34DD-F0F9-42DC-9EDD-957187DA688D} <E:360safemonsafemon.dll, (Signed) 360安全中心>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:windowssystem32MacromedFlashFlash10d.ocx, (Signed) Adobe Systems, Inc.>
[]
{E2E2DD38-D088-4134-82B7-F2BA38496583} <, >
[QvodCtrl Class]
{F3D0D36F-23F8-4682-A195-74C92B03D4AF} <E:快播QvodPlayerQvodInsert.dll, (Signed) Shenzhen QVOD Technology Co.,Ltd>
[导出到 Microsoft Office Excel(&X)]
<res://C:PROGRA~1MICROS~1OFFICE11EXCEL.EXE/3000, N/A>
[添加到QQ表情]
<E:Program FilesTencentQQBinAddEmotion.htm, N/A>
==================================
正在运行的进程
[PID: 756 / SYSTEM][SystemRootSystem32smss.exe] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[PID: 820 / SYSTEM][??C:windowssystem32csrss.exe] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[PID: 848 / SYSTEM][??C:windowssystem32winlogon.exe] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113)]
[C:windowssystem32sfc_os.dll] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[C:windowssystem32uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[PID: 892 / SYSTEM][C:windowssystem32services.exe] [Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[PID: 904 / SYSTEM][C:windowssystem32lsass.exe] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113)]
[C:windowssystem32UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[PID: 1068 / SYSTEM][C:WINDOWSsystem32nvsvc32.exe] [NVIDIA Corporation, 6.14.11.8662]
[C:WINDOWSsystem32nvapi.dll] [NVIDIA Corporation, 6.14.11.8662]
[C:windowssystem32uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[PID: 1096 / SYSTEM][C:windowssystem32svchost.exe] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[C:windowssystem32UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[c:windowssystem32rpcss.dll] [ , 1, 0, 0, 1]
[PID: 1164 / NETWORK SERVICE][C:windowssystem32svchost.exe] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[C:windowssystem32UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[c:windowssystem32rpcss.dll] [ , 1, 0, 0, 1]
[PID: 1308 / SYSTEM][C:windowsSystem32svchost.exe] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[C:windowsSystem32UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[c:windowssystem32appmgmts.dll] [N/A, ]
[c:windowssystem32qmgr.dll] [N/A, ]
[C:windowsSystem32sfc_os.dll] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[C:windowssystem32cryptcom.dll] [N/A, ]
[PID: 1444 / NETWORK SERVICE][C:windowssystem32svchost.exe] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[C:windowssystem32UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[PID: 1524 / LOCAL SERVICE][C:windowssystem32svchost.exe] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[C:windowssystem32UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[PID: 1548 / SYSTEM][C:windowsSystem32svchost.exe] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[C:windowsSystem32UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[c:windowssystem32yk51x86.dll] [Marvell, 10.11.1.3]
[PID: 1804 / SYSTEM][C:windowssystem32spoolsv.exe] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852)]
[C:windowssystem32UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[C:windowssystem32sfc_os.dll] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[C:WINDOWSsystem32AdobePDF.dll] [Adobe Systems Incorporated., 6.0.000]
[C:Program FilesAdobeAcrobat 6.0DistillrAdistRes.CHS] [, ]
[PID: 184 / Administrator][C:WINDOWSsystem32userinit.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:WINDOWSsystem32UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[PID: 236 / Administrator][C:windowsexplorer.exe] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[C:windowssystem32UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[C:windowsLPK.DLL] [N/A, ]
[C:WINDOWSsystem32AcSignIcon.dll] [Autodesk, 16.1.63.0]
[C:windowssystem32t304006.dll] [N/A, ]
[C:windowssystem32t306046.dll] [N/A, ]
[C:windowssystem32t311019.dll] [N/A, ]
[C:windowssystem32t320062.dll] [N/A, ]
[C:Program FilesCommon FilesAutodesk SharedAcSignCore16.dll] [Autodesk, 16.1.63.0]
[C:WINDOWSsystem32nvcpl.dll] [NVIDIA Corporation, 6.14.11.8662]
[C:windowssystem32NVRSZHC.DLL] [NVIDIA Corporation, 6.14.11.8662]
[C:windowssystem32nvapi.dll] [NVIDIA Corporation, 6.14.11.8662]
[C:WINDOWSsystem32nvshell.dll] [, ]
[C:windowssystem32t322041.dll] [N/A, ]
[C:Documents and SettingsNetworkServiceApplication DataDbg32.Sys] [N/A, ]
[C:Program FilesTENCENTSSPlusSAddr1.dll] [腾讯, 5, 1, 14, 10]
[C:Program FilesWinRARrarext.dll] [, ]
[E:360360sdMenuEx.dll] [360.cn, 1, 1, 0, 1080]
[E:快播QvodPlayerQvodBand.dll] [Shenzhen QVOD Technology Co.,Ltd, 3, 0, 0, 0]
[C:Program FilesAdobeAcrobat 6.0Acrobat ElementsContextMenu.dll] [Adobe Systems Inc., 1.0.0.2003051500]
[C:Program FilesAdobeAcrobat 6.0Acrobat ElementsContextMenu.chs] [Adobe Systems Inc., 1.0.0.2003051500]
[PID: 568 / Administrator][C:windowssystem32conime.exe] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)]
[C:windowssystem32UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[C:Documents and SettingsNetworkServiceApplication DataDbg32.Sys] [N/A, ]
[PID: 656 / Administrator][C:windowsRTHDCPL.EXE] [Realtek Semiconductor Corp., 2.2.8.0]
[C:windowssystem32DSOUND.DLL] [Microsoft Corporation, 5.3.2600.5512 (xpsp.080413-0845)]
[C:windowsLPK.DLL] [N/A, ]
[C:windowssystemIuupV.DRV] [N/A, ]
[C:windowssystemuyoFs.DRV] [N/A, ]
[C:windowssystemiChLU.DRV] [N/A, ]
[C:windowssystemYJsfC.DRV] [N/A, ]
[C:windowssystemBTHUR.DRV] [N/A, ]
[C:windowssystemEqPiu.DRV] [N/A, ]
[C:windowssystemSKHdK.DRV] [N/A, ]
[C:windowssystemSQYMJ.DRV] [N/A, ]
[C:windowssystemctFGj.DRV] [N/A, ]
[C:windowssystemlPFPl.DRV] [N/A, ]
[C:windowssystemqpUIE.DRV] [N/A, ]
[C:windowssystemjftrI.DRV] [N/A, ]
[C:windowssystemoMkFF.DRV] [N/A, ]
[C:windowssystemVcpbH.DRV] [N/A, ]
[C:windowssystem32uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[C:Documents and SettingsNetworkServiceApplication DataDbg32.Sys] [N/A, ]
[PID: 700 / Administrator][C:windowssystem32RUNDLL32.EXE] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)]
[C:windowssystem32UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[C:WINDOWSsystem32NvMcTray.dll] [NVIDIA Corporation, 6.14.11.8662]
[C:windowssystem32nvapi.dll] [NVIDIA Corporation, 6.14.11.8662]
[C:windowssystem32NVRSZHC.DLL] [NVIDIA Corporation, 6.14.11.8662]
[C:Documents and SettingsNetworkServiceApplication DataDbg32.Sys] [N/A, ]
[PID: 724 / Administrator][C:windowssystem32ctfmon.exe] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)]
[C:windowssystem32UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[C:Documents and SettingsNetworkServiceApplication DataDbg32.Sys] [N/A, ]
[PID: 1300 / Administrator][C:Program FilesAdobeAcrobat 6.0Distillracrotray.exe] [Adobe Systems Inc., 6.0.0.2003051500]
[C:windowssystem32uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[C:Program FilesAdobeAcrobat 6.0Distillracrotray.chs] [Adobe Systems Inc., 6.0.0.0]
[C:Documents and SettingsNetworkServiceApplication DataDbg32.Sys] [N/A, ]
[PID: 224 / SYSTEM][C:Program FilesSRS LabsWOWXT and TSXT DriverSRS_PostInstaller2.exe] [SRS Labs, Inc., 1, 2, 4, 0]
[C:windowssystem32dsound.dll] [Microsoft Corporation, 5.3.2600.5512 (xpsp.080413-0845)]
[C:windowssystemIuupV.DRV] [N/A, ]
[C:windowssystemuyoFs.DRV] [N/A, ]
[C:windowssystemiChLU.DRV] [N/A, ]
[C:windowssystemYJsfC.DRV] [N/A, ]
[C:windowssystemBTHUR.DRV] [N/A, ]
[C:windowssystemEqPiu.DRV] [N/A, ]
[C:windowssystemSKHdK.DRV] [N/A, ]
[C:windowssystemSQYMJ.DRV] [N/A, ]
[C:windowssystemctFGj.DRV] [N/A, ]
[C:windowssystemlPFPl.DRV] [N/A, ]
[C:windowssystemqpUIE.DRV] [N/A, ]
[C:windowssystemjftrI.DRV] [N/A, ]
[C:windowssystemoMkFF.DRV] [N/A, ]
[C:windowssystemVcpbH.DRV] [N/A, ]
[PID: 1028 / SYSTEM][C:windowssystem32svchost.exe] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[C:windowssystem32UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[PID: 2404 / LOCAL SERVICE][C:windowsSystem32alg.exe] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852)]
[C:windowsSystem32UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[PID: 3164 / Administrator][C:Program FilesInternet Exploreriexplore.exe] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[C:windowssystem32uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[C:WINDOWSsystem32AcSignIcon.dll] [Autodesk, 16.1.63.0]
[C:Program FilesAdobeAcrobat 6.0AcrobatAcroIEFavClient.dll] [N/A, ]
[C:Program FilesAdobeAcrobat 6.0AcrobatATL.DLL] [Microsoft Corporation, 3.00.8449]
[C:Program FilesAdobeAcrobat 6.0AcrobatAcroIEFavClient.CHS] [N/A, ]
[C:Program FilesTENCENTSSPlusSAddr1.dll] [腾讯, 5, 1, 14, 10]
[E:快播QvodPlayerQvodExtend.dll] [Shenzhen QVOD Technology Co.,Ltd, 3, 0, 0, 0]
[E:360safemonsafemon.dll] [360安全中心, 5, 2, 0, 1001]
[C:windowssystem32QQPINYIN.IME] [Tencent, 3.1.722.201]
[C:WINDOWSsystem32DDRAW.dll] [Microsoft Corporation, 5.03.2600.5512 (xpsp.080413-0845)]
[C:windowssystemDKvXy.DRV] [N/A, ]
[C:Documents and SettingsNetworkServiceApplication DataDbg32.Sys] [N/A, ]
[C:windowssystem32MacromedFlashFlash10d.ocx] [Adobe Systems, Inc., 10,0,42,34]
[PID: 3836 / Administrator][C:DOCUME~1ADMINI~1LOCALS~1Temp170981] [N/A, ]
[PID: 4568 / Administrator][C:DOCUME~1ADMINI~1LOCALS~1Temp~Ks2C.tmp] [, 1, 0, 0, 1]
[C:windowssystem32uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[C:Documents and SettingsNetworkServiceApplication DataDbg32.Sys] [N/A, ]
[PID: 4108 / Administrator][C:DOCUME~1ADMINI~1LOCALS~1Temp829966] [N/A, ]
[PID: 3808 / Administrator][C:Program FilesWinRARWinRAR.exe] [, ]
[C:windowssystem32uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[C:Documents and SettingsNetworkServiceApplication DataDbg32.Sys] [N/A, ]
[C:WINDOWSsystem32AcSignIcon.dll] [Autodesk, 16.1.63.0]
[PID: 4880 / SYSTEM][C:windowssystem32wuauclt.exe] [Microsoft Corporation, 7.4.7600.226 (winmain_wtr_wsus3sp2(wmbla).090806-1834)]
[C:windowssystem32UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[PID: 3640 / Administrator][C:Documents and SettingsAdministrator桌面新建文件夹SREngLdr.EXE] [Smallfrogs Studio, 2.8.2.1321]
[PID: 4024 / Administrator][C:Documents and SettingsAdministrator桌面新建文件夹SREbc4dfdb4.EXE] [Smallfrogs Studio, 2.8.2.1321]
[C:windowssystem32uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[C:Documents and SettingsNetworkServiceApplication DataDbg32.Sys] [N/A, ]
[C:windowssystem32sfc_os.dll] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[C:Documents and SettingsAdministrator桌面新建文件夹Upload3rdUpd.DLL] [Smallfrogs Studio, 2, 1, 0, 15]
==================================
文件关联
.TXT Error. [C:windowsnotepad.exe %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR Error. [AutoCADScriptFile]
.CHM Error. ["hh.exe" %1]
.HLP OK. [%SystemRoot%System32winhlp32.exe %1]
.INI Error. [C:windowsSystem32NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%System32NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%System32WScript.exe "%1" %*]
.JS OK. [%SystemRoot%System32WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]
==================================
Winsock 提供者
N/A
==================================
Autorun.inf
N/A
==================================
HOSTS 文件
127.0.0.1 localhost
==================================
进程特权扫描
特殊特权被允许： SeLoadDriverPrivilege [PID = 1068, C:WINDOWSSYSTEM32NVSVC32.EXE]
特殊特权被允许： SeDebugPrivilege [PID = 1300, C:PROGRAM FILESADOBEACROBAT 6.0DISTILLRACROTRAY.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1300, C:PROGRAM FILESADOBEACROBAT 6.0DISTILLRACROTRAY.EXE]
特殊特权被允许： SeDebugPrivilege [PID = 4568, C:DOCUME~1ADMINI~1LOCALS~1TEMP~KS2C.TMP]
特殊特权被允许： SeLoadDriverPrivilege [PID = 4568, C:DOCUME~1ADMINI~1LOCALS~1TEMP~KS2C.TMP]
特殊特权被允许： SeDebugPrivilege [PID = 4108, C:DOCUME~1ADMINI~1LOCALS~1TEMP829966]
特殊特权被允许： SeLoadDriverPrivilege [PID = 4108, C:DOCUME~1ADMINI~1LOCALS~1TEMP829966]
特殊特权被允许： SeDebugPrivilege [PID = 3808, C:PROGRAM FILESWINRARWINRAR.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 3808, C:PROGRAM FILESWINRARWINRAR.EXE]
==================================
计划任务
N/A
==================================
Windows 安全更新检查
N/A
==================================
API HOOK
N/A
==================================
隐藏进程
N/A
==================================


发表评论 评论总数：5条 【论坛浏览】

1楼评论者：月下桂花 于 2010-02-03 19:47 评论道：

不知道试用金山急救箱没有

2楼评论者：eyeego 于 2010-02-04 00:06 评论道：

项目挺多的
建议先用金山急救箱扫描一下再扫日志上来吧

附件: 
IFEO映像挟持修复程序.zip
2010/2/4 00:06, 64.24 KB, 下载次数: 0

3楼评论者：天月来了 于 2010-02-04 08:36 评论道：

((本附件程序仅适合这位求助者使用，因为涉及系统重要文件的替换，所以任何其他求助者绝对不能随意使用这个附件程序。))
下载附件，（右键选择“目标另存为”下载）

新助手.rar


将附件解压至桌面，启动里面的程序后，点击“开始处理”，然后耐心等待，程序提示重启电脑时，立即重启。

记住不要让任何安全软件影响本程序的运行。

附件内附有程序将要处理的日志中相关异常项目文本。使用附件前请查看是否程序要处理的项目有你正常的东西，如果存在正常项目，请不要使用我的附件。

本程序运行后将向系统盘根目录创建123文件夹，并在那文件夹内创建运行日志LogAction.log文件，可以查看运行情况。

愿意的话，请事后将123文件夹内的Backup文件夹压缩发到病毒样本区去。

进系统后下载W i n d o w s 清理助手 ，升级清理你那系统。
W i n d o w s 清理助手 下载：http://www.arswp.com/

杀毒软件升级至最新版本全盘杀。反复查杀无毒后即可。

记得打全系统漏洞补丁

4楼评论者：天月来了 于 2010-02-04 08:37 评论道：

不过金山急救箱应该可以解决问题了

哈哈

5楼评论者：teyqiu 于 2010-02-04 08:54 评论道：

金山急救箱,有前途的工具

页码 1/1 首页 上一页 1 下一页 末页